The University of SydneyPage 81. Strategic Decisions–Choose the right kind of environment–Location -War zone-Social norm –may undermine control structures–Relate to the nature and scope of a firm’s relationship with other firms and contexts–E.g.US based firm –Sarbanes-Oxley Act financial information–E.g.AUS based firm with EU customers –GDPR for information privacy–Are investments in security products and services paying off?–E.g.Compare security investments v/s breaches–Security investment may be in the wrong places–The benefits of security investment may be intangible